Senior DevSecOps Engineer – Application Security Lead

Agoda Company Pte. Ltd.; Singapore; Hybrid; SGD 140,000 - 220,000; Full time

Benefits offered by this job

Hybrid Working Model

30 Days Remote Working from anywhere

Employee travel discounts for stays

Global team of 90+ nationalities

40+ offices and 25+ countries

CSR / Volunteer Time off

Headspace / Udemy subscriptions

Job summary

Agoda Company Pte. Ltd. is seeking an experienced security-focused engineer to lead the design and enforcement of application security controls across web and mobile platforms. You will review security designs for new products, track issues, and build tools to automate remediation at scale.

Ideal candidates have 7+ years of technical security experience, strong threat modeling skills, and hands-on development in Rust, Python, Go or Node.js, with cloud exposure across OpenShift, AWS, GCP or Azure.

Qualifications

• Strong foundations in software engineering.
• 7+ years of technical experience including threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security.
• 2+ years with SDLC in Rust, Python, Go, Nodejs, etc.
• 1+ year experience with public/private cloud environments (OpenShift, Rancher, K8s, AWS, GCP, Azure).
• Experience in running assessments using OWASP MASVS and ASVS.
• Knowledge of common web vulnerabilities (OWASP Top 10).
• Familiarity with automated dynamic scanners, fuzzers, and proxy tools.
• Excellent written and verbal communication for technical and non-technical audiences.

Responsibilities

• Lead the design of application-level security controls and standards.
• Conduct security design reviews for new products and services.
• Track and prioritize security issues.
• Build internal security tools to fix issues at scale.
• Perform code reviews and drive remediation of vulnerabilities.
• Enable automated security testing at scale across microservices, web and mobile platforms.
• Execute security tests on thousands of servers across on‑premise and cloud data centers.

Skills

Software security

Threat modeling

Secure coding

Identity management

Cryptography

Cloud security

OWASP Top 10

Education

Bachelor's degree in CS/Engineering

Tools

OpenShift

Kubernetes (K8s)

AWS

GCP

Azure

Job description

Agoda Company Pte. Ltd. is seeking an experienced security-focused engineer to lead the design and enforcement of application security controls across web and mobile platforms. You will review security designs for new products, track issues, and build tools to automate remediation at scale.

Ideal candidates have 7+ years of technical security experience, strong threat modeling skills, and hands-on development in Rust, Python, Go or Node.js, with cloud exposure across OpenShift, AWS, GCP or Azure.